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On  the  Optimum  Number  and  Location  of  Controls 
in  Accounting  Information  Systems 


ABSTRACT 


Management's  responsibility  for  designing  adequate  and  effective 
controls  in  the  accounting  information  systems  (AIS)  has  recently  in- 
creased due  to  the  Foreign  Corrupt  Practices  Act  ( ] 977)  .  The  choice 
of  an  appropriate  design  (number  and  location)  of  controls  for  the 
AIS  involves  a  tradeoff  between  cost  and  reliability  of  the  system. 
Using  the  systems  concept,  this  study  presents  a  dynamic  programming 
model  to  help  management  resolve  this  tradeoff  by  identifying  a 
easible  set  of  decisions  (designs)  of  control  for  the  AIS  with  serial 
and  nonserial  configurations.   A  coputer  program  has  been  developed 
for  the  application  of  the  model  to  a  hypothetical  payroll  system. 
The  preliminary  results  suggest  that  the  location  rather  than  the 
number  of  controls  has  a  significant  effect  on  the  reliability  and  cost 
of  the  system.  Sensitivity  analysis  showed  that  reasonable  changes 
in  the  accounting  environment  would  not  significantly  affect  the 

results  of  the  model. 


ON  THE  OPTIMUM  NUMBER  AND  LOCATION 
OF  CONTROLS  IN  ACCOUNTING  INFORMATION  SYSTEMS 


In  the  business  environment,  several  parties  are  concerned  with 
one  or  more  aspects  of  performance  of  the  accounting  information 
system  (AIS).   Management  and  internal  auditors,  for  example,  are  con- 
cerned with  the  cost  of  the  AIS,  and  the  accuracy,  timeliness  and 
perhaps  the  quantity  of  the  accounting  information  it  produces.   On 
the  other  hand,  external  auditors  are  usually  concerned  with  the 
reliability  (or  error  rate)  in  the  accounting  information  produced  and 
how  control  functions  are  performed  in  the  system.   These  aspects  of 
performance  are  greatly  affected  by  the  number  and  location  of  the 
accounting  controls  that  are  built  into  the  AIS  to  reduce  the  error 
rate  in  the  accounting  information  processing  and  consequently  reduce 
the  loss  from  reprocessing,  correcting  and/or  using  the  materially 
incorrect  information.   Therefore,  the  analysis  of  the  performance  of 
the  AIS  would  necessarily  require  an  analysis  of  the  accounting 
controls  that  are  placed  into  the  system.   An  ex  post  analysis  may 
help  the  analyst  assess  the  effect  of  such  controls  on  the  overall 
cost  and  error  rate  in  the  accounting  information  produced  by  the 
system.   However,  a  tool  (i.e.,  model)  to  be  used  in  an  ex-ante  analy- 
sis is  needed  to  help  the  analyst  (manager  or  auditor)  determine  an 
appropriate  number  and  location  of  controls  to  be  placed  in  the  system 
such  that  its  performance   parameters    (i.e.,  cost  and  error  rate  in 
the  accounting  information)  are  within  acceptable  limits. 

Management's  concern  about  the  design  of  controls  in  the  AIS  is 
based  on  two  premises:   its  responsibility  for  establishing  and 


maintaining  effective  accounting  controls  to  comply  with  the  Foreign 
Corrupt  Practices  Act  [1977],  and  its  assumed  objectives  of  obtaining 
reliable  accounting  information  for  a  minimum  cost.   Internal  and 
external  auditors  will  need  such  tools  when,  as  a  special  engagement, 
they  are  asked  by  managment  to  provide  suggestions  about  how  to 
increase  the  effectiveness  of  accounting  controls  or  how  to  improve 
the  overall  performance  of  the  AIS. 

This  study  applies  the  systems  concept  to  the  problem  of  designing 
controls  in  th  AIS.   A  dynamic  programming  model  has  been  developed  to 
help  managers  and  internal  and  external  auditors  identify  a  feasible 
set  of  control  decisions  (I.e.,  designs  of  number  and  location  of 
controls)  in  the  AIS.   A  hypothetical  payroll  system  was  used  to 
illustrate  the  application  of  the  model.   The  preliminary  results 
suggest  that  the  location  rather  than  the  number  of  controls  has 
significant  effects  on  the  cost  and  error  rate  in  the  AIS.   Another 
observation  is  that  the  end  of  a  process  (phase  or  stage)  in  the  AIS 
seems  to  be  a  good  location  for  control.   Sensitivity  analysis  showed 
that  reasonable  changes  in  the  accounting  environment  (i.e.,  growth  or 
cost  increase)  would  not  affect  significantly  the  results  of  the 
model. 

PREVIOUS  RESEARCH 
Traditional  techniques  of  analyzing  the  performance  of  the 
accounting  information  systems  such  as  questionnaires,  flowcharts,  and 
tests  of  transactions  have  been  criticized  for  their  nonunif ormity , 
cost  and  time  required  for  their  application,  and  their  subjectivity 
[Loebbecke  and  Zuber,  1980].   In  using  those  techniques,  the  analyst  or 
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manager  cannot  systematically  assess  the  effect  of  the  weakness  of  a 

control  in  the  system  on  the  system's  overall  performance.   Yu  [1972] 

summarized  some  of  these  instances: 

1)  If  the  analyst  finds  a  weak  control  area  from  the 
questionnaires  and  flowcharts,  he  can  rarely  point 
out  precisely  the  impact  of  such  weak  control  on  the 
reliability  of  the  system  as  a  whole,  2)  errors  dis- 
covered by  the  analyst  during  the  tests  of  transac- 
tions are  not  used  in  any  systematic  way  in  assessing 
what  has  been  initially  revealed  by  the  question- 
naires and  flowcharts,  and  3)  the  analyst  (e.g.,  the 
auditor)  may  frequently  have  difficulty  in  defining 
errors  when  applying  statistical  sampling  methods. 
He  also  has  no  means  to  relate  various  test  results 
to  each  other. 

A  number  of  quantitative  models  were  recently  presented  into  the 
accounting  literature  for  the  analysis  of  accounting  controls.   With 
the  growing  interest  in  the  systems  concept  and  its  applications  in 
accounting,  Stallman  [1972]  developed  a  quantitative  model  to  measure 
the  total  cost  of  errors  in  an  existing  accounting  control  system.   Yu 
and  Meter  [1973]  introduced  a  Markovian  model  to  help  assess  the 
reliability  of  accounting  controls.   Applying  the  engineering  concept 
of  reliability,  Cushing  [1974]  presented  another  model  for  reliability 
assessment  of  accounting  controls.   Bodnar  [1975]  extended  Cushing' s 
model  to  evaluate  the  effect  of  parallel  channels  vs.  parallel 
controls  (or  redundancy  of  controls)  on  the  overall  reliability  of  the 
system.   His  analysis  provided  new  insights  for  the  design  of 
accounting  controls.   He  also  discussed  the  special  problems  inherited 
in  the  application  of  reliability  engineering  models  to  the  human  ele- 
ments in  the  accounting  systems.   Hamlen  [1980]  presented  a  chance- 
constrained  mixed  integer-programming  model  for  internal  control 
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design.   The  model  is  designed  to  minimize  the  cost  of  the  system  sub- 
ject to  the  quality  desired  in  the  accounting  information  (i.e.,  mini- 
mum goals  for  error  reduction).   Hamlen's  model,  however,  does  not 
provide  an  overall  rate  of  performance  in  the  system.   In  addition, 
the  model  can  handle  only  a  limited  number  of  processes  in  order  to 
limit  the  number  of  constraints  that  must  be  added  when  the  number  of 
variables  increases.   These  models  have  contributed  significantly  in 
the  understanding  of  the  issues  involved  in  the  analysis  of  accounting 
controls.   They  also  helped  in  uncovering  some  of  the  problems  in 
measuring  quantitatively  the  performance  attributes  of  accounting 
controls.   None  of  these  studies,  however,  was  concerned  with  the 
design  (number  and  location)  of  controls  in  an  AIS  with   non-serial 
configurations  such  as  converging  or  diverging  branches  (channels)  or 
feed  forward  loops  which  are  common  in  the  real  AIS.   Furthermore, 
they  do  not  provide  alternatives  (a  set  of  designs  or  range  of 
choices)  for  the  system  designer  (management)  to  choose  the  design 
(number  and  location  of  controls)  which  is  most  appropriate  for  the 
management's  acceptable  limits  of  cost  and  error  rate  in  the  AIS. 

In  his  description  of  the  characteristics  of  controls,  Neumann 
[1981]  provided  general  guidelines  for  locating  the  controls.   He 
suggested  the  following  locations  for  controls:   "1)  prior  to  a  par- 
ticularly expensive  portion  of  a  project;  2)  preceding  points  of  no 
(or  difficult)  return;  3)  at  the  point  at  which  one  phase  terminates 
and  another  begins;  4)  points  where  measurement  is  more  convenient;  5) 
points  at  which  it  may  be  easier  to  take  corrective  action;  6)  points 
that  still  provide  ample  time  for  corrective  action;  and  7)  following 
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a  complex  task  or  completion  of  an  error-prone  activity."   In  the 
absence  of  a  model  that  would  quantify  the  effect  of  each  of  these 
suggested  locations  on  the  overall  performance  of  the  system,  the 
choice  of  location  of  controls  is  a  highly  subjective  decision  and  may 
lead  to  nonoptimal  solution  with  unacceptable  performance  of  the 
system  (i.e.,  unacceptable  error  rate  or  cost  in  the  accounting 
information).   The  need  for  a  new  model  has  been  acknowledged  [Peat, 
Marwick,  Mitchell  and  Co.,  1976 J  and  as  indicated  by  Felix  [1981], 
little  progress  has  been  made  in  this  regard. 

The  objective  of  this  paper  is  to  apply  the  systems  concept  to  the 
analysis  of  the  number  and  location  of  controls  in  the  AIS.   Specifi- 
cally the  paper  develops  a  dynamic  programming  model  to  be  used  as  a 
decision  support  system  to  help  identify  a  possible  set  of  dominating 
designs  of  controls  and  to  measure  the  effect  of  each  design  on  the 
performance  of  the  AIS.   A  side  objective  is  to  develop  a  computer 
program  for  the  application  of  the  model  to  a  general  class  of  systems 
with  serial  (a  series  of  components)  and  nonserial  (branches  or  loops) 
configurations.   To  illustrate  the  applicability  of  the  model  and  the 
program,  a  hypothetical  AIS  will  be  analyzed. 

RELEVANCE  OF  THE  SYSTEMS  CONCEPT  FOR  THE  ANALYSIS  OF  AIS 
The  systems  concept  views  any  system  as  a  group  of  elements  each 
of  which  performs  some  function(s)  which  are  designed  in  a  specific 
order  to  meet  end  results.   The  concept  emphasizes  the  importance  of 
the  element's  performance  for  the  overall  performance  of  the  system. 
It  concentrates  on  the  definition  of  functions  and  the  flow  of  the 
process  and  not  primarily  the  final  output. 
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In  this  concept  more  consideration  is  given  to  what  happens  in 
between  the  input  and  the  output  points.   Applying  this  concept  to  the 
AIS  requires  a  description  of  the  elements,  functions,  and  processes 
involved. 

An  accounting  information  system  (AIS)  consists  of  operating  com- 
ponents and  control  components.   Operating  components  perform  accounting 
functions  such  as  computing  and  writing  payroll  checks,  recording  a  pur- 
chase, or  preparing  financial  statements.   Control  components,  on  the 
other  hand,  check  on  the  correctness  of  the  accounting  process.   In 
performing  their  functions,  operating  components  can  introduce  errors 
into  the  accounting  information  process  while  control  components  are 
designed  to  reduce  these  errors. 

To  understand  the  relevance  and  application  of  the  systems  concept 
to  the  design  of  accounting  controls,  consider  the  hypothetical  payroll 
system  shown  in  Figure  1.   This  system  includes  operating  components 
designed  in  four  types  of  configuration:   converging  branches,  a  series 
of  component,  feedforward  loops,  and  diverging  branches.   Each  con- 
figuration can  be  viewed  as  a  stage  in  the  system.   Accounting  infor- 
mation processing  is  performed  in  five  consecutive  parts  (stages)  in 
this  system.   The  output  information  from  each  stage  is  the  input 
information  to  the  next  stage  in  the  system.   Therefore,  our  AIS 
can  be  viewed  as  a  five-stage  process  in  which  stage  1  is  a  number  of 
converging  branches,  stage  2  is  a  series  of  components,  stage  3  is  a 
number  of  feedforward  loops,  stage  4  is  another  series  of  components 
and  stage  5  is  a  number  of  diverging  branches.   The  sequence  of  the 
stages  in  our  system  example  is  shown  in  Figure  2. 
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This  problem  of  designing  the  appropriate  controls  into  this  multi- 
stage accounting  process  (system)  fits  the  nature  of  dynamic  pro- 
gramming which  is  an  optimization  procedure  that  is  particularly 
applicable  to  problems  requiring  a  sequence  of  interrelated  decisions. 
Each  decision  transforms  the  current  situation  into  a  new  one.   A 
sequence  of  decisions,  which  in  turn  yields  a  sequence  of  situations, 
is  sought  in  order  to  optimize  (minimize  or  maximize)  some  measure  of 
value.   The  relevance  of  dynamic  programming  to  the  accounting  control 
design  problem  is,  therefore,  based  on  several  analogies:   1)  the  se- 
quential nature  of  accounting  information  processing,  2)  the  need  for 
making  sequential  decisions  regarding  accounting  controls,  3)  the 
cumulative  effects  of  such  control  decisions  on  the  errors  and  cost  of 
the  accounting  information,  and  4)  the  need  for  a  quantitative  tool 
for   the  minimization  of  the  total  cost  of  the  system  given  the  avail- 
able sets  of  controls  (decisions)  to  maintain  the  acceptable  limits  of 
the  error  rate  in  the  information. 

Error  Analvsis 


Possible  errors  in  accounting  systems  may  be  classified  into  two 
types:   errors  which  reduce  the  accuracy/reliability  of  financial 
reporting,  and  errors  which  reduce  the  efficiency/effectiveness  of  the 
organization  management.   Examples  of  the  first  type  include  errors 
in  the  amount  computed  or  recorded  as  payroll  expense  for  the  period, 
or  in  recording  the  correct  amount  in  an  incorrect  account.   On  the 
other  hand,  errors  in  signatures,  names,  social  security  number  and 
other  non-monetary  data  on  payroll  checks  are  examples  of  the  second 
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type  of  errors  which  reduce  the  confidence  in  the  organization  poli- 
cies and  systems.   However,  for  the  analysis  of  the  required  controls 
definitions  of  specific  possible  errors  are  needed.   The  task  of  de- 
fining these  possible  types  of  errors  is  that  of  the  system  designer 
(i.e.,  management).   The  analysis  of  the  required  controls  will  be 
performed  basically  with  respect  to  each  error.   This  would  help  the 
system  designer  to  apply  the  concept  of  materiality  to  each  error 
separately. 

The  ODtimization  Process 


The  cost  to  be  minimized  in  this  study  is  the  total  cost  of  errors 
in  the  system.   The  total  cost  of  errors  include  the  following  costs: 

a)  Costs  of  processing/correcting  erroneous  information 

b)  Cost  of  detecting  errors  (i.e.,  cost  of  installing  and 
operating  control  elements  to  detect  the  existing  errors) 

c)  Cost  of  misinformation  (loss  from  using  incorrect  information) 
The  first  two  costs  are  operating  costs  which  are  reasonably  easy  to 
define  since  their  data  is  usually  recorded  for  financial  reporting 
purposes.   But  the  third  cost  may  not  be  as  readily  determinable. 

The  cost  of  misinformation  is  a  function  of  the  decision  model 
that  uses  this  information.   Decision  models  and  utility  functions  to 
be  considered  in  decision  making  may  differ  according  to  the  decision 
maker.   However,  this  function  may  generally  include  variables  such  as 
the  type  of  error  under  analysis,  the  error  rate  in  the  information, 
and  the  stage  of  the  system  where  the  error  exists  (i.e.,  how  far  in 
the  system  the  error  went  undetected).   Therefore,  the  monetary  loss 
of  misinformation  is  mostly  based  on  these  variables. 
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By  adding  controls  to  the  system  the  error  rate  or  the  probability 
of  information  failure  is  expected  to  decrease.   As  a  result,  the 
operating  cost  of  errors  (i.e.,  the  cost  of  processing  incorrect  or 
unacceptable  information)  and  the  cost  of  misinformation,  will  both 
increase  because  they  are  functions  of  the  error  rate  in  the  infor- 
mation.  On  the  other  hand,  the  total  cost  of  the  system  will  increase 
by  the  cost  of  installing  and  operating  these  additional  controls. 
The  total  cost  effect  of  adding  controls  into  the  system  is  the  total 
cost  of  errors,  and  is  illustrated  in  Figure  3. 

Although  the  cost  of  the  AIS  is  an  important  consideration  to 
management,  its  primary  interest  is  the  reliability/accuracy  of  the 
accounting  information  produced  by  the  system.   Hence,  management's 
decision  concerning  the  design  of  controls  involves  a  tradeoff  between 
the  cost  and  the  error  rate  in  the  information  produced.   To  help 
management  make  the  choice,  the  model  provides  a  set  of  feasible  de- 
signs of  controls  to  help  management  resolve  this  tradeoff  such  that 
the  resulting  error  rate  and  cost  of  the  accounting  information  are 
acceptable.   This  set  of  designs  can  be  described  as  the  dominating 
control  decisions  in  the  optimization  process,  and  is  shown  in 
Figure  4. 

In  this  figure,  the  set  A  includes  the  feasible  decisions  (designs) 
of  control.   All  the  possible  designs  to  the  left  of  point  S  will  pro- 
vide higher  error  rates  for  higher  cost.   Therefore,  the  dominating 
decisions  of  controls  are  included  to  the  right  of  point  S.   How  far 
can  the  set  A  extend  to  the  right  of  point  S  depends  on  the  maximum 
total  cost  that  management  is  willing  to  accept. 
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MODEL  DESCRIPTION 
The  dynamic  programming  representation  of  any  optimization  problem 
requires  the  definition  of  seven  constructs:   the  stages  of  the  system 
(process),  the  states  (conditions)  in  which  the  system  might  be  found, 
the  decision  set  (choices)  that  can  be  made  in  each  stage,  the  state 
transformation  function,  the  constraints  on  optimization,  the  stage  re- 
turn function,  and  the  recursive  equation(s).   For  the  accounting  infor- 
mation system,  these  constructs  can  be  defined  as  follows: 

1)  The  stage  of  the  AIS: 

As  shown  in  Figure  2,  our  system  example  consists  of  five  con- 
figurations.  Each  configuration  is  defined  such  that  it  includes  one 
phase  of  the  accounting  information  process.   This  configuration 
(phase)  is  defined  as  a  stage  in  the  system.   Define  k;  k=l,  2,  ...,  k 
as  the  index  for  the  five  stages  of  the  system.   The  accounting  infor- 
mation that  is  the  output  from  stage  1  is  the  information  that  is  the 
input  to  stage  2  and  so  on.   Each  stage  of  the  system  includes 
B,  branches;  b  =  1,  2,  ...,  B^,  where  b,  is  branch  b  in  stage  k. 

2)  The  states  of  the  AIS: 

The  states  of  the  AIS  can  be  defined  in  terms  of  the  error  rate  in 
the  accounting  information  being  processed.  Let  e  ,  be  the  rate  of 
type  error  t  in  the  accounting  information  processing  at  the  end  of 
stage  k.  That  is  e.  is  the  state  of  the  system  (i.e.,  the  rate  of 
error  t)  at  the  beginning  of  stage  1  and  e  ,  is  the  rate  of  error  t 
at  the  end  of  stage  1.  Similarly  the  state  of  the  system  concerning 
error  t  at  the  end  of  stages  2,  3,  4,  5  are  denoted  e  _,  et^>    erUt 
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and  e  .  in  our  example,  where  the  state  of  the  system  e  .  describes 

t5  r  J  t5 

the  rate  of  error  t  in  the  final  information  output.  The  state  of  the 
system  at  the  end  of  stage  k  (e  ,  )  is  a  function  of  the  combined  error 
rate  from  the  different  branches  in  the  stage  (e  .  ).   That  is 

tbk 

k 

On  the  other  hand,  the  error  rate  at  the  end  of  branch  b,  is  a 

k 

function  of  the  combined  error  rates  from  the  different  components  in 

this  branch.   In  other  words  e,   ■  f(e  .,  );  i  =  l,  2,  *..,  m,   where 

bk      tibk  \ 

m,   is  the  number  of  operating  components  on  branch  b,  .   Since  the 

k 
analysis  of  the  system  will  be  performed  for  each  of  the  predefined 

errors,  we  now  drop  the  subscript  t  considering  that  all  terms  are 

stated  for  this  given  error. 


3)   The  decision  set: 

The  control  decision  at  hand  is  to  optimally  choose  and  place  a 
number  of  controls  in  each  stage  of  the  system.   The  decision  variable 
x,  includes  two  arguments:   n,  which  is  the  number  of  control  units  to 
be  placed  in  stage  k  and  I,     which  is  the  location  of  these  controls. 
This  decision  can  be  written  as: 

xk  =  (V  ifc)  (2) 

A  binary  representation  of  I      (with  0  =  no  control  and  1  =  a  control) 
is  used  in  the  optimization  process.   For  example,  decision  x,  =  (2, 
010010)  means  that  two  control  units  should  be  placed  in  locations  2 
and  5. 
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4)   The  state  transformation  function: 

The  state  (error  rate)  in  the  system  changes  when  each  component 

in  the  system  performs  its  function.   Let  FAIL(input)  denote  the  event 

that  the  inputs  to  the  series  or  branch  do  include  one  or  more  of  the 

predefined  errors  error.   Define  FAIL(i  )  to  be  the  event  that 

operating  component  i  in  branch  b   fails  to  perform  its  functions. 

Then  for  a  branch  b,  with  m  operating  components,  their  combined 

failure  rate  can  be  computed  as  the  event  E,   of  the  failure  in  the 

bk 
output  from  branch  b  . 

b         b  b 

E,   =  FAIL( input)    FAIL(i  )    FAIL(i+l)    ...    FAIL(m  )    (3) 

bk 

The  computation  of  this  transformation  depends  on  the  input  failure 

rate  to  the  branch,  and  the  type  of  components  in  the  branch.   For 

example,  a  branch  which  includes  only  two  operating  components  will 

produce  a  joint  failure  rate  (e   )  is  computed  as: 

k 

e^   =  FR( input)  +  FR.  +  FR0 
b,  l     z 

k 

-  [FR( input)  •  FR  +  FR( input)  •  FR  +  FR   •  FR  ] 

+  [FR(input)  •  FRX  •  FR2] 

where  FR.  is  the  failure  rate  assigned  to  the  individual  component  i 

(b,  was  dropped  from  the  right  side  of  the  equation  because  all  terms  on 

that  side  are  defined  for  b.  ) ,  and  •  is  the  multiplication  operator. 

K. 

If  the  decision  x.  is  to  place  a  control  (a  control  means  a 
control  unit  from  now  throughout  the  paper)  after  component  one  in 
branch  b, ,  then  the  failure  rate  in  the  output  from  this  branch  will 
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be  affected  by  this  decision.   Because  the  defined  control  component 
works  like  a  filter  for  the  errors  in  the  process,  the  failure  rate  in 
the  output  information  from  the  branch,  after  placing  the  control,  can 
be  computed  as: 


e,  (input  to  control)  =  FR(input)  +  FR..  -  (FR(input)  •  FR. ) 

D.  11 

k 

e,  (output  from  control)  =  e,  (input  to  control)  •  FKON 
bk  \ 

e,  (output  from  branch)  =  [e,  (output  from  control)  +  FR„]  - 
bk  bk  2 

[e,  (output  from  control)  •  FR„ ] 
bk  2 

where  FKON  is  the  failure  rate  of  the  control. 

The  overall  error  rate  (state)  of  the  system  at  the  end  of  stage  k 

(e,  )  can  be  computed  as  the  combined  error  rate  from  the  different 

branches  in  stage  k.   The  volume  of  information  (i.e.,  number  of 


documents)  v,   will  be  used  as  weights  in  combining  the  error  rate  for 

bk 
stage  k.   The  combined  error  rate  can  be  written  as: 

Bk  Bk 

e  =  (  E   e,   •  v   )  /  Z       v,  (4) 

k    b-1  bk    bk    b-1  \ 

k  k 

In  general,  the  state  transformation  function  can  be  written  for 
stage  k  as: 

ek  =  Vi  (ek-r  \}  (5) 

where  t^_^  ^s  t^e  transformation  operator;  a,  -  is  the  input  state 
(error  rate)  to  stage  k  and  x,  is  the  decision  of  controls  in  stage  k. 
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5)  Optimization  constraints: 

In  the  optimization  process  only  the  never-dominating  decisions 
are  eliminated  while  all  the  dominating  decisions  (combinations  of 
controls)  are  provided  for  management  to  choose  the  design  of  controls 
that  would  satisfy  their  acceptable  limits  of  cost  and  error  rate  in 
the  accounting  information.   Therefore,  the  maximum  cost  allowed 
(budget  constraints)  or  the  maximum  error  rate  allowed  in  the  account- 
ing information  can  be  placed  as  constraints  on  the  set  of  decisions 
(designs)  obtained  from  the  optimization  process. 

6)  Stage  return  (cost)  function: 

The  cost  function  is  the  total  cost  of  errors  as  defined  above. 
It  includes  the  operating  costs  of  errors  and  the  loss  of  misinfor- 
mation. 

t>k       b^ 
Let  Ci      and  FRj_   be  the  respective  operating  cost  and  failure  rate 

of  the  operating  component  i  in  branch  b  of  stage  k.   The  two  measures 

are  given  per  volume  of  information  v  *  which  is  being  processed  in 

branch  b  of  stage  k.   Let  FKON(j  k)  and  CKON(j  k)  be  the  failure  rate 

and  cost  of  control  j  that  is  placed  in  branch  b,  ,  and  let  g,  (e,  ,x,  ) 

be  the  loss  of  processing  unacceptable  information  in  stage  k  of  the 

system.   This  loss  can  be  computed  as: 


,  Bk   Sb,    nsb      nsb         Tb      Tb 
g (e  x  )  -  {  Z     E*   [  Z        FR.   E*Ct]}+   ^  FR   L*  Cz  (6) 

bk=l  sbk=1   1=1      i=l  J=1      Z=J 


where 


b^  is  branch  b  in  stage  k,  Bk  is  the  number  of  branches  in 
stage  k, 
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s^,  is  control  s  in  branch  b^.   s^,  is  the  total  number  of  con- 
trols in  branch  b^, 

ns]-,,  is  the  number  of  operating  components  between  control  s^,  and 
the  next  control  (s+D^,  ,  and 

T^.  is  the  number  of  operating  components  between  the  last  control 
in  the  branch  (Sb,  )  and  the  end  of  the  stage  k. 

In  addition,  the  cost  of  operating  S  controls  in  stage  k  is  computed  as: 


Sk 

\(\)    =      2   CKON(s)  ,  (7) 

s=l 

CKON(s)  is  the  operating  cost  of  control  s  in  stage  k. 

Therefore,  the  operating  cost  of  the  predefined  errors  in  stage  k 
can  be  written  as 

Define  a   to  be  the  opportunity  cost  (shadow  price)  computed  by 
management  for  using  incorrect  information  in  its  decision  model. 
Therefore,  management  should  compute,  based  on  its  utility  function, 
an  a  ,  for  each  error  type  t  at  the  end  of  each  stage  k  in  the  system. 
The  loss  (cost)  of  misinformation  can  then  be  approximated  for  a  given 
error  at  the  end  of  stage  k  as  a  linear  function  of  the  rate  of  this 
given  error.   That  is 


L(etk>  =  ^tk5  (9) 

where  (e  ,  )  is  the  rate  of  error  t  in  the  information  at  the  end  of 

stage  k,  L(e  .  )  is  the  cost  of  misinformation  from  error  rate  e  ,  . 
ft    '     tk  tk 

The  cost  of  misinformation  at  the  end  of  stage  k  can  be  computed  as: 
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L(ek)  =  cf1  <W«tk>  (10) 


where  L(e,  )  is  the  total  loss  of  misinformation  from  error  types  t=l, 
...,  T  in  the  system  at  the  end  of  stage  k. 

Therefore,  the  total  cost  of  errors  in  stage  k  can  be  written  as: 

VW  +  W  +  Vek'  (11> 

7)   The  recursive  equation: 

Let  f  (e  )  be  the  minimum  total  operating  cost  of  the  system  up  to 
the  end  of  stage  k  given  that  the  error  rate  (state)  of  the  system  at 
the  end  of  stage  k  is  e,  .   Then,  the  recursive  equation  of  dynamic  pro- 
gramming can  be  written  as: 

fk(ek)  =  min  {g^.  xj   +  h^)  +  L^)  +  f^Vi'i        (12) 
xk 

subject  to 

ek  =  'k-l^k-l*  xk^ 

e0  =  ° 

Assumptions  of  the  Model 

Two  assumptions  were  made  in  the  development  of  Che  optimization 
model  presented  above.   First,  the  performance  of  the  different  compo- 
nents are  assumed  to  be  independent.   Because  the  model  is  concerned 
with  unintentional  errors  only,  collusion  between  components  (i.e., 
fraud)  is  not  assumed.   Any  error  may  be  recommitted  again  after  it 
has  been  corrected  as  long  as  the  process  is  in  operation. 
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MODEL  APPLICATION 
The  analysis  of  the  hypothetical  payroll  system  requires  manage- 
ment to  define  the  following  possible  errors  for  which  controls  may  be 
designed: 

1.  Monetary  errors  in  the  financial  accounting  records  (i.e., 
errors  in  recording  the  entry  or  in  the  amount  disclosed 
in  the  financcial  statements). 

2.  Monetary  errors  in  cost  accounting  records  resulting  from 
incorrect  labor  cost  allocation. 

3.  Non-monetary  errors  in  payroll  checks. 

Once  the  errors  are  defined,  the  system  designer  should  define  a 
path  for  each  of  the  predefined  errors.   The  error  path  would  include 
the  elements  (processes)  of  the  system  in  which  the  given  error  is 
likely  to  exist.   As  a  result,  the  entire  accounting  system  can  be 
redefined  as  a  number  of  error  paths  equal  to  the  number  of  the  pre- 
defined errors.   Therefore,  three  error  paths  should  be  defined  in 
our  example.   An  element  (component)  in  the  system  may  be  included  in 
more  than  one  path  if  it  can  make  more  than  one  error.   An  illustra- 
tion of  how  error  paths  are  defined,  specifically  error  path  2,  is 
given  in  Appendix  1.   When  all  error  paths  are  analyzed,  the  results 
may  be  combined  to  provide  an  overall  design  of  controls  for  the 
entire  system. 

2)  Data  Requirements 

Measures  of  operating  cost  and  failure  rate  (C,FR)  should  be 
assigned  to  the  individual  components  based  on  sampling  and  obser- 
vation techniques.   These  measures  should  be  provided  per  volume  of 
information  in  each  payroll  cycle  (i.e.,  number  of  documents).   The 
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frequency  approach  may  be  used  in  assigning  the  probability  of  failure 
to  the  different  components.   Several  studies  including  Yu  and  Neter 
(1973)  and  Cushing  (1974)  have  suggested  the  use  of  such  techniques  in 
collecting  the  data  requirements.   Even  though  operating  cost  of  the 
components  are  easily  determined  per  period  of  time,  it  can  also  be 
measured  per  volume  of  information.   In  this  study,  hypothetical  data 
are  provided.   Some  intuitively  appealing  assumptions  were  considered 
in  providing  this  data. 

For  example,  the  failure  rates  assigned  to  the  operating  elements 
range  from  .020  to  point  .072  depending  on  the  complexity  of  the  pro- 
cess (function)  assigned  to  the  element,  and  whether  it  is  likely  to 
be  a  human  or  a  machine  element.   For  control  elements  (components)  it 
is  assumed  that  the  failure  rates  are  lower  than  for  the  operating 
components,  and  they  range  from  .005  to  .035.   The  operating  cost  of 
the  elements  (both  types)  are  assumed  to  be  adversely  related  to  their 
failure  rates.   That  is,  the  higher  the  failure  rate  the  lower  the 
cost  of  the  element.   This  is  an  application  to  the  usual  quality- 
price  relationship.   The  cost  of  operating  the  different  elements  in  a 
given  branch  is  estimated  with  respect  to  the  volume  of  information 
being  processed  in  the  branch  by  the  element. 

For  the  analysis  of  each  type  of  error,  a  new  set  of  failure  rates 
(probabilities  of  failure)  is  assigned  to  the  elements  which  are  in 
the  path  defined  for  that  error.   If  the  element  is  not  involved  in 
the  path  of  the  error  under  analysis,  a  zero  probability  of  failure  is 
assigned  to  it.   However,  the  operating  cost  of  the  element  stays  the 
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sane  for  all  errors.   Examples  for  the  assignment  of  data  are  given  in 
Appendix  2. 

The  immaterial  amounts  of  cost  and  failure  rate  are  defined  as  $2 
and  .002  respectively  to  be  used  in  the  refinement  of  the  computation. 

3)  Computation  algorithm  and  refinements: 

Figure  5  shows  the  computation  procedures  used  in  the  application 
of  the  model  to  our  payroll  system  example.   This  algorithm  is 
described  in  Appendix  3. 

A  computer  program  has  been  developed  to  carry  out  the  analysis 
described  above.   The  program  is  written  in  FORTRAN-V  and  can  be  used 
in  the  analysis  of  a  general  class  of  systems  with  serial  and  nonserial 
configurations.   The  program  can  handle  series  configurations,  converg- 
ing and  diverging  branches,  and  feedforward  loops.   Considering  that 
any  accounting  system  can  be  defined  as  a  combination  of  these  con- 
figurations, the  program  is  expected  to  have  general  application. 

In  developing  the  program,  two  computational  aspects  were  con- 
sidered.  First,  although  the  model  can  allow  for  redundancy  of 
controls,  this  specific  program  allows  only  one  control  unit  after 
each  performance  component.   Since  the  control  unit  is  designed  to 
detect/correct  a  specific  error  it  may  be  reasonable  to  assume  that 
with  the  choice  of  a  high  quality  control  for  this  specific  error,  the 
output  of  this  control  may  not  need  to  be  rechecked  by  another  imme- 
diately following  control.   Second,  the  operating  cost  of  a  control  is 
estimated  for  a  given  volume  of  information.   If  the  total  volume  of 
information  at  the  merging  point  of  the  output  from  the  different 
branches  (i.e.,  at  the  end  of  the  stage)  is  within  the  limit  on  which 
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the  cost  is  given,  then  the  merge  may  be  a  cost  optimum  location  of 
control  rather  than  the  separate  ends  of  these  branches  before  their 
merge. 

To  increase  the  efficiency  of  the  program  some  computational  re- 
finements (short  cuts)  are  performed  when  preparing  the  outputs  of  the 
analysis  of  stage  k  that  are  used  as  inputs  in  the  analysis  of  the  next 
stage  (k+1).   Three  approaches  were  used: 

a)  Elimination  of  the  "never-dominating"  decisions  (designs)  from  the 
output  of  stage  k  analysis.   The  other  dominating  decisions  (to  be 
used  in  the  analysis  of  the  next  stage)  are  the  ones  that  result 
in  lower  error  rates  and  lower  cost  of  the  system.   To  illustrate, 
if  f,  (e,  )  <  fv(e,  )  and  e,  <  e,  ,  then  x,  is  dominated  by  x.  and 
therefore  e,  is  eliminated  from  the  possible  decisions  (designs) 
for  the  stage  k  and  is  not  considered  in  the  inputs  to  the  analysis 
of  stage  k+1. 

b)  Elimination  of  decisions  with  immaterial  differences  in  their 
effect  on  the  error  rate.   For  example,  the  designer  may  decide 
that  an  amount  of  error  rate,  say  .002,  may  be  sacrificed  for  lower 
total  cost  of  the  system.   In  this  case,  if  e,  -  e,  <  .002,  then 
decision  x^  may  be  eliminated  for  the  lower  cost  of  x,  and  the  im- 
materially higher  error  rate  e  . 

c)  Elimination  of  decisions  with  immaterial  difference  in  cost.   The 
system  designer  may  decide  on  an  amount  of  cost,  say  $2  to  be  im- 
material and  could  be  sacrificed  for  lower  error  rate.   For  example, 
if  f  i( e^  )  "  £],(e\,)    is  less  than  $2,  then  decision  x,  may  be  elimi- 
nated and  x,  may  be  kept  to  provide  the  lower  error  rate  e,  for  the 

Tc  k 


immaterially  higher  cost  f 


k(ek). 
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If  the  analyst  decides  not  to  eliminate  any  decisions,  he  should  input 
zeros  as  immaterial  amounts  for  both  cost  and  error  rate. 

ANALYSIS  OF  RESULTS 

The  results  of  the  application  of  the  model  to  the  hypothetical 
payroll  system  are  summarized  in  Table  1.   The  results  include  only 
the  dominating  decisions  of  control  in  each  stage.   The  table  shows 
both  the  number  and  location  of  controls  in  each  branch  of  each 
configuration  (stage)  in  the  system  as  well  as  whether  a  control  is 
needed  at  the  end  of  the  stage  (the  merge).   For  each  error  path,  a 
set  of  dominating  decisions  of  control  was  obtained.   The  output  table 
provides,  for  each  decision,  the  number  and  location  of  controls,  and 
the  expected  failure  rate  and  total  cost  of  errors  under  the  given 
decision  (design).   The  location  of  controls  is  represented  by  a 
binary  control  which  is  0  for  no  controls  and  1  for  a  control.   There- 
fore, if  the  branch  or  the  stage  has  0  it  means  that  the  decision  is 
to  place  no  controls  in  this  branch  or  stage.   The  decision  0010  means 
that  only  one  control  should  be  placed  in  location  3  in  this  given 
branch  or  series  (location  3  means  after  the  third  operating  component 
in  the  series  or  branch) . 

These  results  suggest  several  observations.   First,  the  design 
that  minimizes  the  failure  rate  does  not  necessarily  suggest  placing 
controls  in  each  stage  of  the  system  (see  design  5  for  errors  1  and  2, 
and  design  6  for  error  3).   Second,  although  the  cost  of  misinforma- 
tion and  the  operating  cost  of  errors  are  functions  of  error  rate,  the 
feasible  control  design  which  minimizes  the  total  cost  suggests  that 
controls  placed  early  in  the  system,  while  the  design  that  minimizes 
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the  failure  rate  in  the  final  output  suggests  placing  some  controls 
close  to  the  end  of  the  system  (i.e.,  in  the  later  stages).   Third, 
for  the  other  designs  that  do  not  provide  miniraums  (for  cost  or 
failure  rate)  they  seem  to  suggest  placing  controls  in  every  other 
stage  of  the  system  (see  designs  3  and  4  in  the  analysis  of  error  1, 
design  4  in  the  analysis  of  error  2,  and  design  5  and  design  2,4  in 
the  analysis  of  error  3).   Fourth,  the  merge  of  converging  branches  or 
feedforward  loops,  appears  to  be  a  good  location  for  control  since  it 
checks  on  the  outputs  from  the  different  branches  for  supposedly  less 
cost  than  if  separate  controls  were  placed  at  the  end  of  each  branch 
before  their  merge.   The  location  of  control  may  affect  significantly 
the  resulting  cost  and  error  rate.   For  example,  designs  1  and  2  in 
the  analysis  of  error  2  suggest  the  same  number  of  controls  in  each 
branch  of  each  stage  of  the  system.   However  the  two  designs  differ  in 
the  location  of  the  control  suggested  for  stage  2.   While  design  1 
places  this  control  in  the  third  location  in  the  stage,  design  2 
defines  the  fourth  location  as  more  appropriate  for  this  control.   The 
result  of  moving  the  control  from  location  3  to  location  4  is  a 
decrease  in  failure  rate  of  .02513  and  an  increase  in  the  cost  of 
errors  by  $280.48. 

Sensitivity  Analysis 

The  validity  of  the  analysis  presented  in  Table  1  depends  on  the 
validity  of  the  data  provided.   One  would  expect  that  the  value  (data) 
of  the  parameters  of  the  model  would  change  over  time  because  of  the 
different  physical,  behavioral,  and  technical  changes  in  the  accounting 
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environment.   The  following  are  the  results  of  the  sensitivity  analy- 
sis to  measure  the  effect  of  such  changes  in  parameters  on  the  perfor- 
mance of  the  model. 

a)  Effect  of  growth  in  the  accounting  information  process: 

Growth  is  an  important  objective  to  every  business  organization. 
As  a  result  of  the  growing  activities,  the  volume  of  information 
(i.e.,  number  of  documents)  is  likely  to  increase.   If  the  increase  in 
volume  is  within  the  capacity  of  the  system  element,  then  the  cost  of 
the  operating  components  will  not  change  and  the  set  of  the  dominating 
decisions  does  not  change.   The  results  of  the  analysis  were  not  sig- 
nificantly different  when  the  volume  of  information  increased  up  to  15 
percent.   The  15  percent  growth  is  assumed  to  be  the  maximum  addition 
to  the  volume  of  information,  which  might  not  require  a  change  in  the 
cost  of  the  operating  components. 

b)  The  effect  of  an  increase  in  cost  parameters: 

The  cost  of  installing  and  operating  the  elements  of  the  system 
may  increase  over  tine  because  of  inflation  and  other  economic  fac- 
tors.  An  increase  of  up  to  7  percent  in  the  cost  of  the  operating 
components  did  not  significantly  change  the  results  of  the  model  for 
all  of  the  error  paths.   However  at  8  percent  increase  in  the  cost  of 
operating  components,  one  of  the  dominating  decision  of  controls  for 
error-1  analysis  disappeared.-  The  results  of  the  analysis  of  the 
other  error  paths  did  not  significantly  change  within  1  =  14%  increase 
in  the  cost  of  the  operating  components. 


-30- 

However,  an  8  percent  increase  in  the  cost  of  controls  was  enough 
to  change  the  results  (basically  increase  or  decrease  the  dominating 
designs  of  controls)  with  respect  to  error  path  1  and  3  and  11  percent 
increase  changed  the  set  of  dominating  decisions  for  error  path  2. 

These  findings  may  support  the  proposition  that  the  larger  (more 
elements)  the  path  of  the  error  the  more  sensitive  the  results  to  the 
change  in  the  cost  of  the  elements  on  this  path.   However,  the  change 
in  cost  is  not  expected  Co  exceed  5-6  percent  each  year  (this  normally 
is  the  raise  given  to  human  elements  and  approximately  the  increase  in 
the  price  of  machine  elements)  which  will  be  within  the  limits  in 
which  the  results  of  the  model  did  not  significantly  change.   There- 
fore, a  new  analysis  of  the  system  may  be  needed  at  least  every  year. 

c)   Effects  of  the  deterioration  in  performance  level  of  the  components 

The  performance  of  the  system  components  (operating  and  control) 
is  expected  to  deteriorate  over  time  because  of  the  aging  effect  on 
the  machine  components,  and  also  the  exhaustion,  fatigue  and  other 
psychological  effects  on  human  components.   On  the  other  hand,  the 
performance  of  the  system  (its  reliability)  may  improve  if  learning 
exists.   However  a  system  that  "consists  of  several  components  that 
are  different  in  nature  [machine  and  human]  and  every  component  has  a 
different  pattern  of  performance  over  time,  and  the  reliability  of  the 
system  is  the  combined  behavior  of  its  components,  then  the  behavior 
of  this  system  over  time  is  likely  to  take  the  shape  of  exponential 
distribution"  (Barlow  and  Proschan,  1963,  p.  16).   Therefore,  in  the 
absence  of  a  descriptive  theory  of  the  AIS  behavior,  it  is  reasonable 
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to  assume  that  the  performance  of  the  components  deteriorate  over 
time. 

A  5  percent  deterioration  (increase  in  failure  rate)  of  the 
operating  components  has  resulted  in  a  smaller  set  of  dominating  deci- 
sions for  error  path  1  and  3  (one  decision  of  control  was  eliminated 
from  the  set).   However  the  set  of  controls  for  the  second  error  path 
did  not  change  with  up  to  11  percent  increase  in  the  cost  of  the 
operating  components.   Because  error  path  2  does  not  include  as  many 
performance  elements  as  the  other  two  paths,  this  again  shows  that  the 
model  is  sensitive  to  the  longer  paths. 

Considering  the  deterioration  of  the  controls  (i.e.,  increasing 
their  failure  rate) ,  the  5  percent  deterioration  was  not  enough  to 
reduce  the  set  of  the  dominating  decisons  obtained  from  the  original 
data.   However  only   percent  deterioration  changed  the  results  of 
error  path  1  and  8  percent  changed  the  results  of  the  other  error 
paths. 

Conclusions  and  Limitations  of  the  Studv 

i 

In  this  study  a  dynamic  programming  model  was  developed  to  be  used 
by  management  (internal  auditors)  or  external  auditors  in  identifying 
alternatives  regarding  how  many  and  where  to  place  controls  in  the  AIS 
such  that  the  performance  of  the  system  (cost  and  error  rate)  is 
within  the  acceptable  limits.   The  model  provides  a  range  of  feasible 
designs  of  control  for  management  to  select  the  most  appropriate  for 
the  environment.   The  model  relies  heavily  on  the  judgements  of  the 
analyst  in  providing  the  data  especially  when  defining  the  cost  of 
misinformation.   However,  since  judgement  is  currently  the  most  common 
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approach  in  the  analysis  and  evaluation  of  accounting  controls,  the 
judgemental  data  needed  for  the  model  are  not  expected  to  be  a  new  and 
significant  problem.   On  the  other  hand,  the  model  is  intended  to 
serve  as  a  tool  (more  structured  and  rigorous)  to  aid  management  in 
making  more  informed  judgements  regarding  the  design  of  accounting 
controls  and  not  to  replace  these  judgements.   The  preliminary  results 
of  the  model  suggest  that  the  location  (rather  than  the  number)  of 
controls  may  have  more  significant  impact  on  the  overall  performance 
of  the  AIS.   The  results  may  also  be  more  sensitive  to  the  change  in 
the  cost  of  the  elements  as  their  failure  rate  in  the  longer  paths 
(with  more  elements)  than  in  the  shorter  ones. 
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Appendix  1:   Definition  of  Error  Path  2 
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